Hi,

i have test of Exchange 2013 SP1 CU7. Seems, that all works good. Users can login over OWA, send emails each other.

In ECP i see all 50 mailboxes. In powershell - only one! Why? how i can fix it?

[PS] C:\>get-mailbox -Identity "*"

Name                      Alias                ServerName       ProhibitSendQuota
----                      -----                ----------       -----------------
User 1                     User 1                 ex1              Unlimited

[PS] C:\>Get-Mailboxdatabase

Name                           Server          Recovery        ReplicationType
----                           ------          --------        ---------------
Mailbox Database 1363112588    EX1             False           None
base1                          EX1             False           None
all                            EX1             False           None

User 1 belong to base1, but into this base there are more mailboxes.

Thank you!

• Edited by Anahaym Tuesday, May 12, 2015 9:50 AM

Please try after running this command

Set-AdServerSettings -ViewEntireForest $true -PreferredGlobalCatalog <gc.domain.com>

Are you getting the same result when running command get-mailbox?

nothing changed
still only one User

• Edited by Anahaym Tuesday, May 12, 2015 1:54 PM

Get-MailboxDatabase | Get-Mailbox

[PS] C:\>Get-MailboxDatabase | Get-Mailbox
Some of the parameters specified with the "Get-Mailbox" cmdlet aren't present in the role definition for the current user. Check the management
roles assigned to you, and try again.
    + CategoryInfo          : PermissionDenied: (:) [Get-Mailbox], CmdletAccessDeniedException
    + FullyQualifiedErrorId : [Server=EX1,RequestId=8f4353bc-70b8-4002-9aae-a6be740e801d,TimeStamp=12.05.2015 14:28:28] [FailureCategory=Cmdlet-Cmdl
   etAccessDeniedException] 98B25FB9,Microsoft.Exchange.Management.RecipientTasks.GetMailbox
    + PSComputerName        : ex1.domain.internal

i compared membership with domain\administrator. what is missing?

[PS] C:\>Get-ADUser -Identity aleks -Properties memberof | Select-Object MemberOf

MemberOf : {
CN=import,OU=Microsoft Exchange Security Groups,DC=domain,DC=internal,
CN=Server Management,OU=Microsoft Exchange Security Groups,DC=domain,DC=internal,
CN=Recipient Management,OU=Microsoft Exchange Security Groups,DC=domain,DC=internal,
CN=Organization Management,OU=Microsoft Exchange Security Groups,DC=domain,DC=internal,
CN=Domain Admins,CN=Users,DC=domain,DC=internal,
CN=Enterprise Admins,CN=Users,DC=domain,DC=internal,
CN=Schema Admins,CN=Users,DC=domain,DC=internal
}

[PS] C:\>Get-ADUser -Identity administrator -Properties memberof | Select-Object MemberOf

MemberOf : {
CN=import,OU=Microsoft Exchange Security Groups,DC=domain,DC=internal,
CN=Server Management,OU=Microsoft Exchange Security Groups,DC=domain,DC=internal,
CN=Recipient Management,OU=Microsoft Exchange Security Groups,DC=domain,DC=internal,
CN=Organization Management,OU=Microsoft Exchange Security Groups,DC=domain,DC=internal,
CN=Group Policy Creator Owners,CN=Users,DC=domain,DC=internal,
CN=Domain Admins,CN=Users,DC=domain,DC=internal,
CN=Enterprise Admins,CN=Users,DC=domain,DC=internal,
CN=Schema Admins,CN=Users,DC=domain,DC=internal,
CN=Administrators,CN=Builtin,DC=domain,DC=internal
}

By Administrator all works.

• Edited by Anahaym Tuesday, May 12, 2015 3:30 PM

[PS] C:\Windows\system32>$env:username
aleks
[PS] C:\Windows\system32>[Environment]::UserName
aleks
[PS] C:\Windows\system32>[Environment]::UserDomainName
domain
[PS] C:\Windows\system32>[Environment]::MachineName
EX1

as Aleks and as Administrator i'm working from same server EX1. Why for Aleks EMS is broken, for Administrator - isn't?

and why if EMS is broken Aleks can see one Mailbox?

Hi Anahaym,

We might consider this as a bug maybe, its very difficult to pinpoint upon issues as this. Atleast we have identified where it breaks and where not.

EMS shortcut in your case is having issues. It can be due to the way Exchange was installed caused someting to change etc. (You can see EMS uses the script RemoteExchange.ps1 to load). It can be something to do with the Bare OS install as well.

Missed one thing earlier, what happens if you create a new user and make it full administrator. Does that user also behave like your account or its like the adminstrator.

Secondly add yourself to all the groups Domain Admin, Enter schema etc administrator is member of and check.

NOTE- After all the changes wait for sometime reboot the client\server you are logged on.

Test it on a fresh install and see if the issue repeats, if yes you might want to report a bug to MS.

It might be a good idea to give MSFT support a call on this one.  The RBAC roles seem a bit wonky.  Before calling them, you can try running the Adpreps again and seeing if that makes a difference.